$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer File: afa70384-20ce-4e0a-b42a-581d05c70079.cer (raw, json) Hash identifier: hvc29pTk9Pi/elc+t+v+i77DFycgyjrbY2f2Rn+KuTg= Subject key identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 Certificate issuer: /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Certificate serial: 010D0C9F4328584DB0F002E97A9EEDC1748B3100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 May 2026 17:07:26 +0000 Certificate not after: Thu 03 Aug 2028 17:07:26 +0000 Subordinate resources: AS: 22317 IP: 104.219.104.0/21 IP: 208.85.208.0/22 IP: 2620:0:c10::/44 IP: 2620:128:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:f0:02:e9:7a:9e:ed:c1:74:8b:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62 Validity Not Before: May 1 17:07:26 2026 GMT Not After : Aug 3 17:07:26 2028 GMT Subject: CN=afa70384-20ce-4e0a-b42a-581d05c70079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:d5:3d:6c:3b:c7:0e:78:e1:e6:e1:a4:48: d0:1d:ad:9e:b5:08:45:02:8f:b9:6d:64:8d:8f:d7: ee:2a:56:96:98:9a:bc:24:50:cf:cd:0c:01:29:19: 1c:48:e2:e5:c9:ff:ae:a8:74:ec:83:16:9c:d0:5d: f9:33:66:17:f1:c9:9c:33:6e:99:ac:0c:fa:c1:3e: bf:b9:cc:39:f8:0d:08:55:5a:3e:e0:b9:af:ab:b6: 6c:b4:3f:f4:b0:f6:05:ff:9f:b6:b7:91:ce:30:31: 33:9d:65:89:63:fa:31:2b:da:1e:96:d0:43:85:0c: 28:e2:28:28:d1:53:7c:96:50:57:27:13:89:bd:4d: 42:27:cf:bc:ef:b3:9f:73:85:12:23:91:e6:97:51: 2a:f3:fb:a8:be:a8:cb:90:de:6b:fe:4c:35:e2:d2: 76:fb:cf:5f:1e:16:bd:29:f8:14:70:6f:87:10:e1: 4d:c0:9a:70:c4:cb:2b:e2:c8:45:f3:07:df:d4:61: cf:3b:82:9b:87:6f:a2:c6:a9:c0:35:47:0f:13:8a: 2d:e1:87:7b:79:82:65:c7:24:3d:a0:fd:f1:14:da: 3d:7b:a0:fc:03:84:42:3e:8d:cc:db:21:f7:af:a9: cb:90:90:0d:58:2d:47:a7:98:41:07:9a:93:44:07: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl X509v3 Authority Key Identifier: keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer sbgp-ipAddrBlock: critical IPv4: 104.219.104.0/21 208.85.208.0/22 IPv6: 2620:0:c10::/44 2620:128:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22317 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:bd:9d:17:b2:2d:57:34:00:ac:3e:70:c7:60:61:fe:c6:98: a1:20:34:14:70:b7:f5:7d:ee:dc:bf:5d:54:3e:88:65:6b:b8: 25:cb:e5:19:0a:d3:29:8a:f6:43:22:0e:14:ea:31:ce:7c:7b: 9a:d7:50:31:e2:78:8f:d5:10:c7:3c:d8:28:b6:43:c3:0e:70: 12:c1:ed:5d:eb:d5:7a:2c:ac:75:ca:e1:70:e2:63:28:9a:19: c4:d4:00:19:f0:8b:52:33:f1:35:c4:94:71:92:93:2b:af:da: cb:4b:3b:f2:33:9b:68:6d:4b:7c:01:43:d9:e4:c3:1b:45:85: 40:ad:4b:20:af:20:11:98:31:bf:d6:b4:90:3c:99:55:de:52: 52:6f:1c:e6:71:1c:62:c0:4d:ef:52:39:2b:9b:81:db:f3:22: ae:e5:b5:bd:7d:82:0d:cc:d2:86:84:65:bf:5c:b5:1d:71:a0: df:77:db:4f:28:c7:b6:04:e1:82:c6:1c:45:65:9a:65:ea:df: 99:e8:1e:d7:d4:9b:1a:e6:70:c0:16:6f:d3:55:5e:d8:2d:9d: e1:f0:f7:f7:f1:86:4a:aa:91:ab:a2:64:80:d5:a5:b1:1c:22: fe:f8:25:63:2d:bd:d5:ce:8c:f7:73:bf:36:2c:a9:f8:b7:19: df:fd:90:d9 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE2w8ALpep7twXSLMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw YjYyMB4XDTI2MDUwMTE3MDcyNloXDTI4MDgwMzE3MDcyNlowLzEtMCsGA1UEAxMk YWZhNzAzODQtMjBjZS00ZTBhLWI0MmEtNTgxZDA1YzcwMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdfVPWw7xw544ebhpEjQHa2etQhFAo+5bWSN j9fuKlaWmJq8JFDPzQwBKRkcSOLlyf+uqHTsgxac0F35M2YX8cmcM26ZrAz6wT6/ ucw5+A0IVVo+4Lmvq7ZstD/0sPYF/5+2t5HOMDEznWWJY/oxK9oeltBDhQwo4igo 0VN8llBXJxOJvU1CJ8+877Ofc4USI5Hml1Eq8/uovqjLkN5r/kw14tJ2+89fHha9 KfgUcG+HEOFNwJpwxMsr4shF8wff1GHPO4Kbh2+ixqnANUcPE4ot4Yd7eYJlxyQ9 oP3xFNo9e6D8A4RCPo3M2yH3r6nLkJANWC1Hp5hBB5qTRAc9owIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFGo/30nLDYSdFsKLMJq7RbAdg7N+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9h ZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVjNzAwNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2FmYTcwMzg0LTIwY2UtNGUwYS1i NDJhLTU4MWQwNWM3MDA3OS9hZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVj NzAwNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1 YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwPgYIKwYBBQUH AQcBAf8ELzAtMBIEAgABMAwDBANo22gDBALQVdAwFwQCAAIwEQMHBCYgAAAMEAMG ACYgASjgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlctMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALK9nRey LVc0AKw+cMdgYf7GmKEgNBRwt/V97ty/XVQ+iGVruCXL5RkK0ymK9kMiDhTqMc58 e5rXUDHieI/VEMc82Ci2Q8MOcBLB7V3r1XosrHXK4XDiYyiaGcTUABnwi1Iz8TXE lHGSkyuv2stLO/Izm2htS3wBQ9nkwxtFhUCtSyCvIBGYMb/WtJA8mVXeUlJvHOZx HGLATe9SOSubgdvzIq7ltb19gg3M0oaEZb9ctR1xoN93208ox7YE4YLGHEVlmmXq 35noHtfUmxrmcMAWb9NVXtgtneHw9/fxhkqqkauiZIDVpbEcIv74JWMtvdXOjPdz vzYsqfi3Gd/9kNk= -----END CERTIFICATE-----Generated at Wed May 13 02:48:19 2026 by rpki-client